RE: DHCP snooping

From: Rik Guyler (rik@guyler.net)
Date: Thu Apr 17 2008 - 12:44:27 ART


Sadiq and Murphy, you guys nailed it. Adding the "no ip dhcp snooping
information option" line fixed my issue. I should have guessed that the
option 82 field was to blame but that didn't really stand out in the debugs,
at least not to me.

Changing the trunk interface command from "ip dhcp relay information
trust-all" (I found this one on one of the many websites I visited) to "ip
dhcp snooping trust" also corrected the problem with trusting between
switches.

Am I the only one that finds the docs for this to be especially poor? It's
a tough read with very little explanation.

Thanks again guys! ;-)

Rik

-----Original Message-----
From: Sadiq Yakasai [mailto:sadiqtanko@gmail.com]
Sent: Thursday, April 17, 2008 5:41 AM
To: Murphy, William
Cc: Rik Guyler; ccielab@groupstudy.com
Subject: Re: DHCP snooping

Hi Rik,

My advice:

Take out < ip dhcp relay information trusted> from both switches'
trunks, take out <ip dhcp relay information trust-all> from both
switches' global config as well.

3750:
Global config: <no ip dhcp snooping information option>
On trunk port towards 3560: <ip dhcp snooping trust>

3560:
On trunk port towards 3750: <ip dhcp snooping trust>
On port towards the server: <ip dhcp snooping trust>

Ofcourse on SVI VLAN 20 you have the helper address command (not
needed on the int vlan 10 though).

HTH

Else, can you please send a full show run?

Sadiq

Pass the CCIE in six weeks, Guaranteed!
http://www.certscience.com/CCIE



This archive was generated by hypermail 2.1.4 : Thu May 01 2008 - 08:25:51 ART